On Wed, 15 Nov 2023 05:54:23 -0700 dann frazier <da...@dannf.org> wrote: > Package: wnpp > Severity: wishlist > Owner: dann frazier <da...@debian.org> > X-Debbugs-Cc: debian-de...@lists.debian.org > > * Package name : virt-firmware > Version : 23.10 > Upstream Contact: Gerd Hoffmann <kra...@redhat.com> > * URL : https://gitlab.com/kraxel/virt-firmware > * License : GPL-2+ > Programming Lang: Python > Description : Tools for manipulating edk2 (ovmf/qemu-efi) firmware images > > This is a collection of tools for edk2 firmware images. They support > decoding and printing the content of firmware volumes. Variable stores > (e.g. OVMF_VARS.fd) can be modified, for example to enroll secure boot > certificates. Tools included: > > virt-fw-dump - Decodes and prints the content of firmware volumes. > > virt-fw-vars - Print and edit variable store volumes. Currently focused on > enrolling certificates and enabling secure boot. > > virt-fw-sigdb - Print and edit EFI signature database files. > > host-efi-vars - Read efi variables from linux efivarfs and decode/print them. > > kernel-bootcfg - Manage efi boot configuration for UKIs (unified kernel > images) when using direct boot (without boot loader like > grub or systemd-boot). > > pe-dumpinfo - Information dump for pe (the format used by EFI) binaries. > > pe-listsigs - List signatures and certificate chain for pe binaries. Can also > extract certificates & signatures. > > > My immediate motivation for packaging this is that, as the maintainer of > the edk2 package, I need to remove some deprecated image types - specifically > the OVMF 2M images. These utilities can help users migrate their VMs to > supported types by dumping/loading the variable stores. > > In the future, I expect edk2 packaging to evolve into using these tools > to modify images out-of-band, instead of launching QEMU instances to > modify them in-band as part of the build. >
Hello Dann, I find myself in need of this package for some CI usage as well, are you planning to work on this soon? Do you need any help? Thanks! -- Kind regards, Luca Boccassi
signature.asc
Description: This is a digitally signed message part
